Drew Grimstead discusses the changing risk landscape of ransomware attacks on academic institutions. As learning becomes more digitized, the scope of assets and technologies that need protection increases. Federal and localized governance combined with values such as “Academic Freedom” make education a particularly challenging sector to secure. This paper deconstructs various risks associated with ransomware attacks and proposes possible mitigations both from an organizational and legislative lens.